Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: xVZ+w73q4n5THpQon9O2++PbpwfV1VHasAc/P+pmlVM=
Subject key identifier: 39:89:3B:1F:94:87:46:FC:EF:61:4C:80:E0:D8:18:06:F2:25:E3:D1
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 0198D4E07917EE85AC13BF219330F6A5CD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0ED2
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: w/DxzPnKWilKMvHUyCHj/1H4O5KGe27/Le9/My0Pb5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:79:17:ee:85:ac:13:bf:21:93:30:f6:a5:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=39893b1f948746fcef614c80e0d81806f225e3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:64:65:b9:42:c5:63:67:88:aa:2c:32:fe:
eb:13:2c:cb:69:f4:df:3b:5e:41:1a:b2:c4:c7:a1:
12:01:53:2a:e5:1e:07:60:de:0d:17:6a:75:63:4d:
12:6c:76:5c:e1:67:b3:07:2d:6c:3a:39:36:8b:fe:
6f:01:70:37:06:da:4f:1e:fe:32:4b:90:67:c9:ee:
90:41:20:45:0a:7c:56:24:ff:3f:81:3c:1a:40:49:
9a:c7:f8:ec:cd:c7:11:ba:58:39:a0:d0:a6:ea:f1:
e7:b2:14:55:13:d5:57:16:63:b3:3c:5a:e6:54:46:
ae:ab:d6:1b:50:15:d0:46:4f:21:82:3a:58:c5:08:
ae:ac:95:20:50:92:43:2f:a2:94:29:a2:83:40:60:
08:f7:75:c6:48:17:46:93:b5:6a:bf:e0:3c:94:0d:
23:cc:b4:ca:2c:9f:10:36:12:4d:03:73:14:7d:92:
e5:f5:bd:8f:3c:3f:9d:66:5a:0a:82:71:2c:71:8d:
a7:93:1b:ce:1b:54:33:57:b7:c5:2e:b0:c7:d5:79:
0e:df:66:8a:ce:87:b8:2f:aa:bb:70:93:0c:05:6a:
f6:4d:12:1c:1f:85:a6:2e:69:50:b3:7e:12:46:74:
52:b6:61:11:13:dd:3a:fc:8a:8a:a4:9b:db:2d:f9:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:3B:1F:94:87:46:FC:EF:61:4C:80:E0:D8:18:06:F2:25:E3:D1
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a8:58:b9:88:95:9d:43:a9:7d:27:67:94:0b:ba:16:4d:fc:
ea:45:72:f4:fe:5b:fe:76:45:c4:03:35:55:9b:1b:e3:90:d0:
ba:ef:c6:56:3d:4b:45:1f:b1:9c:20:73:0b:19:38:95:b6:5f:
2d:b4:98:f1:0f:24:14:f2:23:f2:49:c0:d5:7a:b6:57:93:f2:
7b:0a:33:2e:8f:75:b3:5e:9e:19:fa:ca:ea:00:14:d4:c8:6c:
66:8a:26:9e:9d:b9:d6:4a:13:05:07:4e:db:8b:c9:92:eb:e4:
2e:87:b5:33:8f:70:3c:49:05:07:e2:f8:1f:ba:9a:16:e0:0b:
53:12:2d:1f:bb:0e:6e:25:45:ff:36:be:7b:84:b4:2c:cb:04:
79:97:6b:f4:7f:e7:0a:04:0f:91:a4:54:5c:76:7c:04:1e:45:
36:6e:44:cd:be:c6:ca:08:c4:3d:b3:ae:e0:69:b7:f3:63:40:
34:d7:bf:69:7a:8e:40:74:82:3e:f3:05:e9:6d:d7:06:58:54:
40:ec:0b:65:51:10:0f:79:fa:07:e2:30:84:72:a3:40:0c:45:
33:0b:78:d5:58:05:ed:56:23:cf:02:2d:97:2c:b8:37:3c:5f:
ec:d2:36:ad:cd:ec:44:30:f6:ec:06:cc:b1:06:7c:88:14:51:
6d:e4:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:27 2025 by rpki-client